Insights success The 10 Fastest Growing Security Solution Provider Companies november2016-min

Code Dx:
A Software Vulnerability
Correlation and Management System
Most computer security incidents can be traced
back to weaknesses in software that were
inadvertently put there when the code was
developed. Attackers can–and very often do–find and
exploit such weaknesses as a means to attack organizations’
applications. Information security has focused primarily on
network security and less on securing the software that
resides on networks and poses risks. Numerous Application
Security Testing (AST) tools help software developers and
security analysts find vulnerabilities during all stages of the
software development lifecycle, but many don’t use these
tools until it’s too late.
Code Dx Enterprise is a software vulnerability correlation
and management system that consolidates and normalizes
software vulnerabilities detected by multiple static
application security testing (SAST) and dynamic
application security testing (DAST) tools, as well as the
results of manual code reviews. Code Dx addresses several
obstacles to deploying secure software: the high cost of
using multiple AST tools; combining and correlating the
results of multiple tools into one format; and prioritizing
vulnerabilities for easy remediation and reporting.
Code Dx overcomes these obstacles by first providing an
easy-to-use and affordable tool that automatically selects,
configures and runs open-source software tools for the
user’s specific code base. It also correlates and
de-duplicates the results of multiple commercial and
open-source static source code and DAST tools. Finally, it
provides a vulnerability management solution that helps
prioritize vulnerabilities, assign them to developers for
remediation and track the remediation process.
Uniqueness of Code Dx
Code Dx differentiates itself from its competitors on ease of
use, lower cost, the number and types of static and dynamic
testing tools supported, and seamless integration into
software development environments. In the business of
making software more secure, Code DX helps software
developers, testers and security analysts find vulnerabilities
before the attackers can exploit them. It provides easy and
affordable application vulnerability correlation and
management systems that enable users to search for and
manage vulnerabilities in software.
The award-winning Code Dx solution integrates the results
of multiple static and DAST tools and manual reviews into
a consolidated set of results for quick and easy triage,
prioritization and remediation. By offering the hybrid
combination of findings from static and dynamic
application security testing, Code Dx provides users with
broader vulnerability testing coverage to better identify
those vulnerabilities which are easily accessible to an
external attacker.
Service with Satisfaction
Code Dx addresses a number of issues across its diverse
clientele. For those who are relatively new to application
security, Code Dx offers support for understanding the
output of the testing tools embedded within Code Dx. In
fact, the company has been lauded by several customers for
20
November 2016